Overview
overview
7Static
static
3EqualizerA....2.exe
windows10-2004-x64
7EqualizerA....2.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ol.dll
windows10-2004-x64
3$PLUGINSDI...ol.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...re.dll
windows10-2004-x64
3$PLUGINSDI...re.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ay.dll
windows10-2004-x64
3$PLUGINSDI...ay.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3Benchmark.exe
windows10-2004-x64
1Benchmark.exe
windows11-ltsc_2024-x64
1Configurat...e).url
windows10-2004-x64
1Configurat...e).url
windows11-ltsc_2024-x64
1Configurat...e).url
windows10-2004-x64
1Configurat...e).url
windows11-ltsc_2024-x64
1DeviceSelector.exe
windows10-2004-x64
7DeviceSelector.exe
windows11-ltsc_2024-x64
7Editor.exe
windows10-2004-x64
1Editor.exe
windows11-ltsc_2024-x64
1EqualizerAPO.dll
windows10-2004-x64
7EqualizerAPO.dll
windows11-ltsc_2024-x64
7Qt6Core.dll
windows10-2004-x64
1Qt6Core.dll
windows11-ltsc_2024-x64
1Qt6Gui.dll
windows10-2004-x64
1Qt6Gui.dll
windows11-ltsc_2024-x64
1Qt6Network.dll
windows10-2004-x64
1Qt6Network.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/09/2026, 04:28
Behavioral task
behavioral1
Sample
EqualizerAPO-x64-1.4.2.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
EqualizerAPO-x64-1.4.2.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISpcre.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISpcre.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsArray.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsArray.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Benchmark.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Benchmark.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Configuration reference (online).url
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Configuration reference (online).url
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Configuration tutorial (online).url
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Configuration tutorial (online).url
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
DeviceSelector.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
DeviceSelector.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
Editor.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Editor.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
EqualizerAPO.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
EqualizerAPO.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
Qt6Core.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
Qt6Core.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
Qt6Gui.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
Qt6Gui.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
Qt6Network.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
Qt6Network.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target Editor.exe
- Size 1.7MB
- Sample260928-e3t8dawthy
- SHA256 77fd42c9eef32f5ab8d4feca0ddd7469d3850c9b443e47ad5b445a824adb78a2
- MD5 3cb35d4c65c10ad41a9c4b6c19b68857
- SHA1 c64e12dac2b3466a04f31e50bc8e8bcd14285734
- SHA512 7bd8aebe625d758f22ff07925b038368fedc45d85f8386a52260bd6d95255a2042dcc00507107a4ffa04f9e9ed54e046bdccabd8f1c57d71c7d4b3e97611179d
- SSDEEP 24576:pwbORyty5wTTDzKI7zilNwke74OBsEAkav:2KRoy5wTjKIXmNwke7AEA
- TLSH T168858D1BA3FD02F9E1BAD13CC60B450AE7B2740A47729BCF129689661F236E15D3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1084 Editor.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1084 Editor.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 3412 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 3412 AUDIODG.EXE
Processes
-
C:\Users\Admin\AppData\Local\Temp\Editor.exe"C:\Users\Admin\AppData\Local\Temp\Editor.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
PID:1084
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004F4 0x00000000000005041⤵
- Suspicious use of AdjustPrivilegeToken
PID:3412